2021-05-07 17:04:13 +02:00
|
|
|
/** @file
|
|
|
|
* @brief mbed TLS initialization
|
|
|
|
*
|
|
|
|
* Initialize the mbed TLS library like setup the heap etc.
|
|
|
|
*/
|
|
|
|
|
|
|
|
/*
|
|
|
|
* Copyright (c) 2017 Intel Corporation
|
2024-08-02 14:42:14 +02:00
|
|
|
* Copyright (c) 2024 Nordic Semiconductor ASA
|
2021-05-07 17:04:13 +02:00
|
|
|
*
|
|
|
|
* SPDX-License-Identifier: Apache-2.0
|
|
|
|
*/
|
|
|
|
|
2022-05-06 11:09:00 +02:00
|
|
|
#include <zephyr/init.h>
|
|
|
|
#include <zephyr/app_memory/app_memdomain.h>
|
2023-12-11 17:27:32 +01:00
|
|
|
#include <mbedtls/platform_time.h>
|
|
|
|
|
2022-06-15 00:47:21 +02:00
|
|
|
#include <mbedtls/debug.h>
|
|
|
|
|
2021-05-07 17:04:13 +02:00
|
|
|
#if defined(CONFIG_MBEDTLS)
|
|
|
|
#if !defined(CONFIG_MBEDTLS_CFG_FILE)
|
|
|
|
#include "mbedtls/config.h"
|
|
|
|
#else
|
|
|
|
#include CONFIG_MBEDTLS_CFG_FILE
|
|
|
|
#endif /* CONFIG_MBEDTLS_CFG_FILE */
|
|
|
|
#endif
|
|
|
|
|
|
|
|
#if defined(CONFIG_MBEDTLS_ENABLE_HEAP) && \
|
2024-08-02 14:42:14 +02:00
|
|
|
defined(MBEDTLS_MEMORY_BUFFER_ALLOC_C)
|
2021-05-07 17:04:13 +02:00
|
|
|
#include <mbedtls/memory_buffer_alloc.h>
|
|
|
|
|
2024-08-20 14:52:53 +02:00
|
|
|
#ifdef CONFIG_MBEDTLS_HEAP_CUSTOM_SECTION
|
|
|
|
#define HEAP_MEM_ATTRIBUTES Z_GENERIC_SECTION(.mbedtls_heap)
|
|
|
|
#else
|
|
|
|
#define HEAP_MEM_ATTRIBUTES
|
|
|
|
#endif /* CONFIG_MBEDTLS_HEAP_CUSTOM_SECTION */
|
|
|
|
static unsigned char _mbedtls_heap[CONFIG_MBEDTLS_HEAP_SIZE] HEAP_MEM_ATTRIBUTES;
|
2021-05-07 17:04:13 +02:00
|
|
|
|
|
|
|
static void init_heap(void)
|
|
|
|
{
|
|
|
|
mbedtls_memory_buffer_alloc_init(_mbedtls_heap, sizeof(_mbedtls_heap));
|
|
|
|
}
|
|
|
|
#else
|
|
|
|
#define init_heap(...)
|
|
|
|
#endif /* CONFIG_MBEDTLS_ENABLE_HEAP && MBEDTLS_MEMORY_BUFFER_ALLOC_C */
|
|
|
|
|
init: remove the need for a dummy device pointer in SYS_INIT functions
The init infrastructure, found in `init.h`, is currently used by:
- `SYS_INIT`: to call functions before `main`
- `DEVICE_*`: to initialize devices
They are all sorted according to an initialization level + a priority.
`SYS_INIT` calls are really orthogonal to devices, however, the required
function signature requires a `const struct device *dev` as a first
argument. The only reason for that is because the same init machinery is
used by devices, so we have something like:
```c
struct init_entry {
int (*init)(const struct device *dev);
/* only set by DEVICE_*, otherwise NULL */
const struct device *dev;
}
```
As a result, we end up with such weird/ugly pattern:
```c
static int my_init(const struct device *dev)
{
/* always NULL! add ARG_UNUSED to avoid compiler warning */
ARG_UNUSED(dev);
...
}
```
This is really a result of poor internals isolation. This patch proposes
a to make init entries more flexible so that they can accept sytem
initialization calls like this:
```c
static int my_init(void)
{
...
}
```
This is achieved using a union:
```c
union init_function {
/* for SYS_INIT, used when init_entry.dev == NULL */
int (*sys)(void);
/* for DEVICE*, used when init_entry.dev != NULL */
int (*dev)(const struct device *dev);
};
struct init_entry {
/* stores init function (either for SYS_INIT or DEVICE*)
union init_function init_fn;
/* stores device pointer for DEVICE*, NULL for SYS_INIT. Allows
* to know which union entry to call.
*/
const struct device *dev;
}
```
This solution **does not increase ROM usage**, and allows to offer clean
public APIs for both SYS_INIT and DEVICE*. Note that however, init
machinery keeps a coupling with devices.
**NOTE**: This is a breaking change! All `SYS_INIT` functions will need
to be converted to the new signature. See the script offered in the
following commit.
Signed-off-by: Gerard Marull-Paretas <gerard.marull@nordicsemi.no>
init: convert SYS_INIT functions to the new signature
Conversion scripted using scripts/utils/migrate_sys_init.py.
Signed-off-by: Gerard Marull-Paretas <gerard.marull@nordicsemi.no>
manifest: update projects for SYS_INIT changes
Update modules with updated SYS_INIT calls:
- hal_ti
- lvgl
- sof
- TraceRecorderSource
Signed-off-by: Gerard Marull-Paretas <gerard.marull@nordicsemi.no>
tests: devicetree: devices: adjust test
Adjust test according to the recently introduced SYS_INIT
infrastructure.
Signed-off-by: Gerard Marull-Paretas <gerard.marull@nordicsemi.no>
tests: kernel: threads: adjust SYS_INIT call
Adjust to the new signature: int (*init_fn)(void);
Signed-off-by: Gerard Marull-Paretas <gerard.marull@nordicsemi.no>
2022-10-19 09:33:44 +02:00
|
|
|
static int _mbedtls_init(void)
|
2021-05-07 17:04:13 +02:00
|
|
|
{
|
|
|
|
|
|
|
|
init_heap();
|
|
|
|
|
2022-06-15 00:47:21 +02:00
|
|
|
#if defined(CONFIG_MBEDTLS_DEBUG_LEVEL)
|
|
|
|
mbedtls_debug_set_threshold(CONFIG_MBEDTLS_DEBUG_LEVEL);
|
|
|
|
#endif
|
|
|
|
|
2024-05-24 16:51:31 +02:00
|
|
|
#if defined(CONFIG_MBEDTLS_PSA_CRYPTO_CLIENT)
|
|
|
|
if (psa_crypto_init() != PSA_SUCCESS) {
|
|
|
|
return -EIO;
|
|
|
|
}
|
|
|
|
#endif
|
|
|
|
|
2021-05-07 17:04:13 +02:00
|
|
|
return 0;
|
|
|
|
}
|
|
|
|
|
2021-04-20 12:31:44 -07:00
|
|
|
#if defined(CONFIG_MBEDTLS_INIT)
|
2024-06-20 15:05:48 +08:00
|
|
|
SYS_INIT(_mbedtls_init, POST_KERNEL, CONFIG_KERNEL_INIT_PRIORITY_DEFAULT);
|
2021-04-20 12:31:44 -07:00
|
|
|
#endif
|
|
|
|
|
|
|
|
/* if CONFIG_MBEDTLS_INIT is not defined then this function
|
|
|
|
* should be called by the platform before any mbedtls functionality
|
|
|
|
* is used
|
|
|
|
*/
|
|
|
|
int mbedtls_init(void)
|
|
|
|
{
|
2023-07-06 12:10:14 +02:00
|
|
|
return _mbedtls_init();
|
2021-04-20 12:31:44 -07:00
|
|
|
}
|
2023-12-11 17:27:32 +01:00
|
|
|
|
|
|
|
/* TLS 1.3 ticket lifetime needs a timing interface */
|
|
|
|
mbedtls_ms_time_t mbedtls_ms_time(void)
|
|
|
|
{
|
|
|
|
return (mbedtls_ms_time_t)k_uptime_get();
|
|
|
|
}
|